Archive
10 August 2016
Vulnerabilities first published on this day (UTC), newest first.
6 results · Feed
-
Unscored —
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local use…
-
Unscored —
Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to acc…
-
Unscored —CVE-2016-5419 EPSS 15%
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which all…
-
Unscored —
Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_…
-
Unscored —CVE-2016-5420 EPSS 15%
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which mig…
-
Unscored —
Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly …